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Abstract 

We study the complexity of the Local Hamiltonian Problem (denoted as LH-MIN) in the special case 
when a Hamiltonian obeys the condition that all off-diagonal matrix elements in the standard basis are 
real and non-positive. We will call such Hamiltonians, which are common in the natural world, stoquastic. 
An equivalent characterization of stoquastic Hamiltonians is that they have an entry-wise non-negative 
Gibbs density matrix for any temperature. We prove that LH-MIN for stoquastic Hamiltonians belongs 
to the complexity class AM — a probabilistic version of NP with two rounds of communication between 
the prover and the verifier. We also show that 2-local stoquastic LH-MIN is hard for the class MA. With 
the additional promise of having a polynomial spectral gap, we show that stoquastic LH-MIN belongs 
to the class PostBPP=BPP pat h — a generalization of BPP in which a post-selective readout is allowed. 
This last result also shows that any problem solved by adiabatic quantum computation using stoquastic 
Hamiltonians is in PostBPP. 



1 Introduction 

For the last few years significant progress has been made in understanding the computational complexity 
of spin Hamiltonian problems. This area of research is of great importance for physics, since most strongly 
interacting quantum many-body systems can not be fully analyzed by analytical methods; thus, we can only 
hope to understand their properties from numerical simulations. A system is efficiently simulatable if the 
computational resources one needs for simulation grow only polynomially with the number of spins in the 
system. For example, one-dimensional spin chains with a small amount of entanglement can be simulated 
by the DMRG method and its recent generalizations to matrix product states 1.2,3. It has been proposed 
that systems of interacting bosons, like those described by the bosonic Hubbard model, can be simulated 
using the Green's function Monte-Carlo technique, see [H[S]. It is believed that a quantum computer will 
offer more possibilities to simulate quantum systems. Understanding the computational complexity of spin 
Hamiltonian problems might help to identify classes of Hamiltonians for which efficient classical or quantum 
simulation algorithms could be developed. 

We shall consider the Local Hamiltonian Problem defined in [51 [7] . A k- local n-qubit Hamiltonian is a 
Hermitian operator H acting on (C 2 )®" that can be expressed as a sum of fc-qubit interactions: H = J2s ^S- 
Here SC. {1, . . . , n} runs over all subsets of qubits of cardinality k and H$ may be an arbitrary Hermitian 
operator on S tensored with the identity on all qubits from {1, . . . , n}\S. The locality of interactions in the 
definition above can be regarded as an algebraic locality. It should not be confused with a geometric locality 
which can be defined only if the set of qubits is endowed with a metric or a graph structure. A natural unit of 
energy set by H is given by the maximum operator norm of the interactions, J = maxg ||i?s||- Let X(H) be 
the smallest eigenvalue of H, i.e. the ground-state energy. Suppose we are promised that either X(H) < or 
X(H) > 5, where 6 is at least pol y( n ) ■ The Local Hamiltonian Problem is formulated as a decision problem: 
given the data (n, {i?s} ,6), one has to decide whether X(H) < 0. A more formal definition is given in 
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Section 12.11 We will refer to the Local Hamiltonian problem as LH-MIN indicating that it is the problem of 
estimating the minimum eigenvalue of H . 

If one considers a generic spin Hamiltonian H that lacks any additional structure except for the locality 
of interactions, it is extremely unlikely that LH-MIN can be solved in polynomial time (even on a quantum 
computer). Indeed, it was shown by Kitaev [5] that LH-MIN is a complete problem in the complexity class 
QMA — the quantum analogue of NP. This QMA-complctcncss result applies even to Hamiltonians with 
2-qubit nearest-neighbor interactions on 2D square lattice [7J[8]. Therefore, instead of looking for efficient 
algorithms for evaluating the ground-state energy, we have to focus on efficient proving protocols by which 
the prover (a party with unlimited computational power) can prove an upper bound on the ground-state 
energy to the verifier (a party that has polynomial resources). 

By definition, the inclusion LH-MIN 6 QMA means that the upper bound X(H) < has an efficient 
quantum proving protocol with one round of communication between the prover and the verifier, see [9]. One 
of the goals of the present paper is to argue that there exists a large subclass of quantum local Hamiltonians 
for which LH-MIN has an efficient classical proving protocol with a constant number of communication 
rounds. This subclass involves all local spin Hamiltonians whose matrix elements in the standard basis of n 
qubits satisfy the condition that all off- diagonal matrix elements are real and non-positive. A nice property 
of such Hamiltonians is that the corresponding Gibbs density matrix p = e~^ H / Tr (e~P H ) has non-negative 
matrix elements in the standard basis for any [3 > 0. From this non-negativity property of the Gibbs matrix it 
follows by simple linear algebra arguments that the ground-state l^o) of H has non-negative real coefficients, 
i.e. I^o) = ^2i a i\i) where on > 0. Thus one can associate a probability distribution with the ground-state, 
P(i) = - ■ ^ one i s a ble to sample efficiently from this distribution one can determine X(H) (for details 
see Section [5]). Because of the relation to stochastic processes we have adopted the term stoquastic to refer 
to these Hamiltonians. In the 'standard' basis, these Hamiltonians have non-positive off-diagonal matrix 
elements. This standard basis for local Hamiltonians is typically the local spin-z basis, but one can of course 
allow for local unitary basis changes without changing the complexity of the problem. 

Clearly, any classical spin Hamiltonian, i.e. a Hamiltonian which is diagonal in the standard basis, falls 
into the stoquastic class. Here are some 1-local and 2-local stoquastic operator on qubits: 

—X, -X®\z)(z\ for ze{0, 1}, -pX® X-qY ® Y for any < q < p. 

It can be shown that all 2-local stoquastic Hamiltonians on qubits can be generated by taking convex linear 
combinations of these stoquastic 2-local interactions and all classical 2-local interactions (composed solely 
from tensor products of Z) 0- 

Stoquastic Hamiltonians are very common in physics. Among spin-1/2 models, the well-studied ferro- 
magnetic Heisenberg models and the quantum transverse Ising model (considered for example by Farhi [10] 
in the context of adiabatic quantum computation) are stoquastic. Another example is a Heisenberg anti- 
ferromagnet on a cubic lattice (or more generally, on a bipartite graph): 

H = ^2 Xj ® Xk + Yj ®Y k + Zj ® Z k . 

Here the qubits live at vertices of the lattice and the interactions couple nearest-neighbors on the lattice. 
Although H is not directly stoquastic, it can be simply made so by a local change of basis. Indeed, if a 
lattice admits a bi-coloring, one can apply Z to every white vertex to flip the sign of X ® X and Y ® Y0. 
This produces a stoquastic Hamiltonian. 

Although in this paper we focus only on spin-1/2 Hamiltonians, the stoquastic class naturally extends 
to systems of qudits, or even infinite-dimensional particles (e.g. harmonic oscillators). For example, a 
system of spin-less interacting bosons is described (in the first quantization formalism) by a Hamiltonian 
H = K + U, where K = — ^^2 a A a is a kinetic energy (when the vector potential is zero) and U is a 
potential energy. Off-diagonal matrix elements of H come only from K . The discretized version of the 
Laplacian, A Q = — J2j + 1)01 + b)0 + 1| — shows that all off-diagonal matrix elements of K 

1 \t can be shown that there are 3-local Hamiltonians on qubits which are stoquastic, but not termwise stoquastic, i.e. they 
cannot be written as a sum over stoquastic terms that acts on 3 qubits at the time. 
2 The new basis coincides with the original one up to phases of the basis vectors. 
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are non-positive. Outstanding examples in this category are bosonic Bose-Einstein condensates and Helium- 
4 [llj . there is a general belief in the computational physics community that the ground-state properties of 
such systems are "easy" to simulate, although no rigorous basis for this opinion seems to exist presently. 

All Josephson-junction qubit systems of the 'flux'-type are stoquastic. The quantum-mechanics of any 
such system is that of a collection of distinguishable (rather than bosonic or fcrmionic) particles with a 
Hamiltonian K + U as just discussed [12] . It was this observation that initiated the present investigation, 
and indicated that flux qubits would not be the most general choice for implementing adiabatic quantum 
computation. 

Other stoquastic Hamiltonians are identified by noting that bosonic creation/annihilation operators a \ j) = 
y/j \ j — 1) and a 1 ' \j) = y/j + 1 1 j + 1) have non-negative matrix elements in the occupation number basis. 
Therefore a hopping operator —a^aj. — a\ ctj, and the entire class of bosonic Hubbard models, belongs to 
the stoquastic class. Among systems involving both spin-1/2 and bosonic degrees of freedom, the Jaynes- 
Cummings model [13] , and the spin-boson model [14] , are also stoquastic when suitable phases are associated 
with the vectors in the standard basis. 

Naturally, not all Hamiltonians in physics are stoquastic. Many fermionic systems are non-stoquastic; the 
antisymmetry of the (first-quantized) wavefunction causes it to have sign changes in the position basis. In 
the occupation- number (second-quantized) basis, terms of both signs typically occur as off-diagonal matrix 
elements on account of the anticommutation relations of the creation and annihilation operators. Special 
fermionic systems, like the spin systems mentioned above, can avoid this 'sign problem' but generic fcrmionic 
systems do not. Hamiltonians of charged (bosonic or fermionic) particles in the presence of a magnetic field 
will also not be stoquastic (the Hamiltonian, and the ground-state are typically complex). 

Stoquastic Hamiltonians have also featured in recent work in quantum information theory. In Ref. [15] 
they are used to define an adiabatic path algorithm that is derived from a classical reversible Markov chain 
and in Refs. [TSl HZ] they are similarly defined on the basis of a Monte-Carlo process that generates the 
equilibrium distribution of some classical Hamiltonian. In these constructions, there is a direct connection 
between the rapid convergence of the Markov chain and the gap of the resulting stoquastic Hamiltonian. In 
some sense these constructions, and our results, are rigorous expressions and examples of the physics folklore 
theorem which says that one can map ground-state problems of d-dimensional Hamiltonians onto classical 
statistical problems in d + 1-dimensions [18] . In this paper we show in fact that if some rigorously defined 
version of this folklore statement were true than it would have the complexity-theoretic consequence that 
QMA C AM, which we consider unlikely. Thus as it stands, it is only the class of stoquastic Hamiltonians 
that allow for this quantum-to-classical mapping. 

2 Summary of Main Results 

Let us review our main results. Obviously, restricting ourselves to a subclass of local Hamiltonians can only 
reduce the complexity of LH-MIN which means that stoquastic LH-MIN belongs to the class QMA. On the 
other hand, stoquastic LH-MIN is NP-hard, since it includes all classical local Hamiltonians. Indeed, it was 
proved by Barahona [19] that finding the ground-state energy of the Ising model on the 3D cubic lattice with 
couplings J G { — 1,0, +1} is a NP-complete problem. 

Firstly, we prove that stoquastic LH-MIN belongs to the complexity class AM. AM is a probabilistic 
analogue of NP with two rounds of communication between the prover and the verifier, see Section [3] 
The proof proceeds by mapping stoquastic LH-MIN to the Approximate Set Size problem. We consider a 
"partition function" Z — Tr (G L ), where G = I — (3 H \s a. non-negative matrix whose largest eigenvalue is 
/i = 1 — (3X(H). If L is a sufficiently large, Z w /i L and thus Z provides enough information about A(i/). 
Then we convert G into a sum of 0, 1-matrices thus expressing Z as a sum of a Boolean function over all input 
arguments. Evaluating this sum is equivalent to the Approximate Set Size problem. The latter problem 
admits a two-round interactive proof based on Carter- Wegman universal hashing, see [2U][ST]. It should 
be noted that AM also contains a generalization of stoquastic LH-MIN in which G may be an arbitrary 
non-negative matrix specified by a black box. In a sequel to this paper [22) we will strengthen this result 
and prove that stoquastic LH-MIN is in a class called SBP. 

Secondly, we show that the 6-local stoquastic Hamiltonian problem is hard for the class MA — the 
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probabilistic analogue of NP(scc Section Q] for details). The main idea of the proof is that any classical 
probabilistic machine can be simulated by a classical circuit C with reversible gates whose input include 
ancillary random bits. Such a circuit can be transformed into a coherent form Uc by replacing each gate 
with a unitary operator (which just permutes basis vectors) and replacing each random bit with a coherent 
superposition (|0) + |l))/\/2. Making use of the standard clock Hamiltonian construction [6] we can define 
a local Hamiltonian H whose ground-state energy is related to the maximum acceptance probability of the 
quantum circuit Uc- The condition that Uc is composed only of classical gates guarantees that H is an 
stoquastic Hamiltonian. We then prove that allowing Merlin to feed quantum states into the verifying circuit 
does not give him any additional cheating power as compared to the classical case. 

Thirdly, we prove that for any constant k fc-local stoquastic LH-MIN can be reduced in polynomial time 
to 2-local stoquastic LH-MIN. The proof is based on perturbation theory gadgets introduced in [7]. We 
construct a new three-qubit gadget that involves only stoquastic interactions, see Section [5] for details. A 
corollary of this result is that 2-local stoquastic LH-MIN is hard for MA. The fact that the complexity of 
fc-local stoquastic LH-MIN does not depend upon k indicates that this problem might be complete for some 
well-defined computational class, even though the nature of this class remains elusive to us. 

Finally we consider a special case of stoquastic LH-MIN in which the Hamiltonian has a polynomial 
spectral gap (the difference between the smallest and the second smallest eigenvalue is l/poly(n) for some 
polynomial in n), see Section [5] for details. In this case we prove that stoquastic LH-MIN belongs to the 
class PostBPP — the class of languages recognizable by poly-time probabilistic Turing machines which 
produce the correct answer (with constant error probability) conditioned on the value of a 'success flag' 
bit (the success probability may be exponentially small though). The proof relies on the ideas borrowed 
from the Green's Function Quantum Monte Carlo method, see [5] and we show that post-selected classical 
computation gives us the power to sample from the ground-state distribution. This last result also implies 
that any decision problem solved by an adiabatic quantum algorithm that uses only stoquastic Hamiltonians 
is contained in PostBPP. 

2.1 Definition of the Local Hamiltonian Problem 

We shall denote the smallest eigenvalue of a Hamiltonian H by X(H). 

Definition 1 For any integer k, polynomials pi(n) and P2(n) define a set Cl(k,pi,p2) involving all k-local 
n-qubit Hamiltonians H = X^s such that for any fixed k < n < oo one has 

• \\H S \\ < Pi(n) for all subsets S C {1, . . . , n}, \S\ = k 

• Either X(H) < or \(H) > l/p 2 (n) 

Suppose we are given a Hamiltonian H S £l(k,p±,p2) and our goal is to decide whether X(H) < 0. Clearly 
the correct decision can be made even if the interactions H$ are specified only up to some precision S 
polynomial in 1/n. Indeed, if Hamiltonians H and H' are e-close in the operator norm, \\H — H'\\ < e, 
then their ground-state energies are also e-close, \X(H) — X(H')\ < e (see for example [23])- Thus, although 
fl(k,pi,p2) is a continuum set, we can safely assume that any H £E Q(k,pi 1 p2) is described by poly(n) bits. 
In that sense we can regard Q(k,p\,p2) as a set of finite binary strings. 

Definition 2 (Local Hamiltonian Problem (LH-MIN)) Given a description of a Hamiltonian H E 
Q{k,pi,p2), decide whether X(H) < 0. 

3 Stoquastic LH-MIN in AM 

The complexity class AM was introduced originally by Babai [53] as a class of decision problems that possess 
a randomized interactive proof with two-way communication between the prover (Merlin) having unlimited 
computational resources and the verifier (Arthur) capable of doing only polynomial-time computation. It is 
a remarkable property of the class AM that any proving protocol with constant number of communication 
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roundel can be simulated by a protocol with just two rounds [53], such that the first message is sent from 
Arthur to Merlin, and the second one backwards. 

We shall mostly consider promise problems. Let E = {0, 1} and let E™ be a set of n-bit strings and E* be 
a set of all finite binary strings. A promise problem can be regarded as a pair of non-overlapping subsets of 
binary strings L ycs ,L no C E* corresponding to positive and negative instances. An Arthur-Merlin proving 
protocol for a membership x G L ycs involves Arthur's question q G arLC j Merlin's response r G 

where p is a fixed polynomial and \x\ is the number of bits in x. Arthur's question is just a random bit 
string drawn from the uniform distribution. The response r may be an arbitrary function of x and q. Once 
the communication is completed, Arthur has at his disposal all the data x,q,r. Then he runs a BPP test 
V(x,q,r) that outputs either 1 (accept the proof) or (reject the proof). 

A proving protocol must obey soundness and completeness properties. Completeness means that for 
positive instances, x G L yes , Merlin has a strategy (i.e. a response functions r(x,q)) for which Arthur's ac- 
ceptance probability is close to 1. Soundness means that for negative instances, x G L n o, Arthur's acceptance 
probability is close to for all possible Merlin's strategies. Here is a formal definitiorQ 

Definition 3 A promise problem L = L ycs U L no C E* belongs to the class AM iff there exists a polynomial 
p and a BPP predicate V(x,q,r) defined for any q,r G E^M^ suc }i that 

xeL ycs =► 3r(x,q) F[V(x,q,r(x,q)) = 1] > 2/3 

x G L no =>■ V r(x, q) P[V(x, q, r(x, q)) = 1] < 1/3 (1) 
where q G E p (l x l) is a uniformly distributed random bit string. 

The main goal of this section is to show that LH-MIN for stoquastic Hamiltonians belongs to the class 
AM. Moreover, we will prove that evaluation of the largest eigenvalue of any n-qubit non-negative matrix 
whose matrix elements arc efficiently computable is a problem that naturally sits in AM. This result applies 
even to matrices that lack any additional structure like locality or sparseness. To emphasize this point, we 
will formulate all results in terms of black box matrices. A black box matrix G of size 2" x 2™ is an oracle 
that takes as input two binary strings x, y G E™ and returns a matrix element G x ^ y = (x\G\y) written in the 
binary form. We shall always assume that any matrix element G x>y has at most poly(n) binary digits (see 
the remark after Definition [1} . In the case when G is specified by a local Hamiltonian, there is no need to 
query the oracle, since G has a concise representation and we can compute G XtV in a time poly(n). 

Let G be a black box non-negative matrix and let /x(G) be the largest eigenvalue of G. To cast the 
evaluation of /i(G) into a decision problem we shall introduce two thresholds: an upper threshold /i + and a 
lower threshold fi-, such that < fi- < /i+ and the separation between fi^ and /x+ is large enough. 

Definition 4 For any polynomial p{n) define a set A(p) consisting of all A-tuples (n, G, //_) such that n 
is an integer 1 < n < oo, fj,± are positive numbers such that log(/i+) — log(/i_) > l/p(n), and G is a 2™ x 2™ 
real symmetric matrix such that 

• < G XtV < 1 for all x, y G E™. 

• Either /i(G) > /i+ or fi(G) < 

Suppose we are given a 4-tuple (n, G, /i_) G A(p) and our goal is to decide whether /i(G) > 
According to the Weyl perturbation theorem (see the remark after Definition QJ, the correct decision can 
be made even if the matrix elements G x>v and the numbers pi± are specified only up to some precision 5 
polynomial in 2~". Indeed, if G and G' are two 2™ x 2™ matrices such that matrix elements of G and G' 
are e-close, then |^i(G) — £i(G')| < ||G — G'|| < 2™e. Thus, although A(p) is a continuum set, we can safely 
assume that the numbers /i± and any matrix element G XtV are described by poly(n) bits. 

Definition 5 (Stoquastic Largest Eigenvalue Problem) Given is a 4-tuple (n,G, /i_) G A(p) where 
G is specified by a black box. Decide whether fi(G) > 

3 A communication round involves a single message sent from one party to the other. 

4 It is known that completeness with a constant error probability is equivalent to perfect completeness, see 1251 . 



5 



Remark: One can easily see that stoquastic LH-MIN is a special case of the problem above. Indeed, 
if H G 0(fc,pi,p2) is a fc-local stoquastic Hamiltonian on n-qubits, see Definitions 11121 one can define a 
non-negative matrix G = (1/2) (/ — H/C), where C is an efficiently computable polynomial upper bound on 
the norm ||-ff||, for example, G = J^s ll-^sil- Off-diagonal matrix elements of G are non-negative because 
H is stoquastic. Diagonal matrix elements are non-negative because I — H/C is a positive semi-definite 
operator. Since ||G|| < 1, we conclude that < G x . y < 1. One can also define the thresholds /i+ = 1/2 and 
/i_ = (1/2)(1 — 1/Cp2(n)). Clearly, the resulting 4-tuple (n,G, fi+, //_) G A(p) for a proper choice of the 
polynomial p. 

Theorem 6 Stoquastic Largest Eigenvalue Problem belongs to the class AM. 

Proof: Consider any 4-tuple (n, G, G A(pi) where pi is a fixed polynomial. Instead of proving 

the lower bound KG) > /x+ Merlin will actually try to prove a lower bound Tr(G L ) > (n+) L where L is a 
large even integer. Note that 

KG) > Tr(G L ) > ^ 

ju(G) < => Tr(G L ) < 2™ /A 

The separation between the value of the trace for positive and negative instances is thus given by 

Tr (G L )yes > 2^7x^7 ~ n 
Tr(G L ) no " 

If one chooses L = 2npi(n), the separation is 2™. 

The next step is to represent the evaluation of the trace Tr(G L ) as a counting problem. As was mentioned 
after Definition f?l we can assume that the matrix elements G x . y have at most p2{n) digits, where P2(n) is a 
polynomial. In order to define the counting problem, we shall represent G as an average over an ensemble 
of 0, 1-matrices G(t), where t is a random uniformly distributed binary string t G zZ P2 ^ n \ that is 

G =^rE G W< ™^P2(n). (2) 

Any member of the ensemble G(t) is a binary matrix, that is, matrix elements of G(t) take only values and 
1. This representation is efficient in the sense that for any fixed strings x, y, t one can find a matrix element 
(x\G(t)\y) by making one query to the black box for G and performing a polynomial-time computation. 
Details of the representation Eq. ((2]) are not essential for the analysis of the proving protocol, so we postpone 
its proof until Lemma [1] Now we have 

Tr(G L ) = — ^ E ^(G(* 1 )---G(t i )) = ^£F( S ), 

ti,...,t L s 

where s = {t\ 1 . . . , x\, . . . , Xl) is a binary string of length (m + n)L and F(s) is a Boolean function 
F(s) = (a;i|G(ti)|a;a) (x2\G(t 2 )\x 3 ) ■ ■ ■ (x L \G(t L )\ Xl ) G {0, 1}. 

Evaluation of F(s) requires L black box queries and polynomial-time computation. Summarizing, the value 
of Tr(G L ) is proportional to a cardinality of a set Q, C j] < - m+n ) L supporting the function F, 

Tr (G L ) = ^TT M> n = i s e S(m+ " )L : F ( s ) = !>» 

and membership s £ CI can be efficiently verified. Note that there is large enough separation between the 
cardinality of CI for positive and negative instances: 

KG) > M+ =>■ 1^1 > LARGE 
KG) < H- M < SMALL, 



(i 



where 



LARGE = 2 i(p2(rl)+logAl + ) and SMALL = 2 i(p2(n)+log ^- + T), 



(3) 



such that 

LARGE = 2™ • SMALL if L = 2np 1 (n). (4) 

Thus it suffices for Merlin to prove a lower bound > LARGE. 

We can now invoke the Goldwasser and Sipser approximate counting protocol [20] based on Carter- 
Wegman universal hashing functions [21]. Recall that f2 is a set of fc-bit strings, where k = L(n + P2(n)). 
The main idea of [20] is that Arthur can compress fc-bit strings to shorter &-bit strings using randomly chosen 
linear hash functions. One can choose parameters of the hashing such that the image h(n) C E b is sufficiently 
dense (for positive instances). Arthur estimates the volume of h(Cl) using the standard Monte-Carlo method: 
he generates a large list of random 6-bit strings and estimates the fraction of strings that belong to h(fl). 
At this stage he needs Merlin's help, since a membership in the set h(fl) is no longer efficiently verifiable 
because each string in E b may have exponentially large number of pre-images. On the other hand, Merlin 
can prove a membership in the set h(Q) by sending Arthur any of pre-images. In Appendix [X] we give some 
details of the parameters of the hash functions. 

Now we prove the Lemma underlying Eq. ([2]) 

Lemma 1 Let I m — {2~ m p} p= o....,2 m -i be the set of all real numbers between and 1 having at most m 
binary digits. Let g : S™ — > L m be a function specified by a black box. Then there exists a Boolean function 
/ : E" x E m — > £ such that 

9( x ) = ^ E f° rdl * eS "- 

Besides, f(x,t) can be represented by a circuit of length poly (n + m) making one query to the black box. 
Proof Let dj(x) be the j-th binary digit of <?(:c), that is 



Define m auxiliary Boolean functions 

h(x,t) 
h(x,t) 
h{x,t) 

fm{x> 

Here tj is the j-th bit of t. Clearly, 

T^T Yl /iO"'*) = ^jdj(x), j = l,...,m. 

t6S m 

By definition, the functions fj and fk are mutually exclusive for j =/= k. Therefore 

m 

E^ = /i V /2V...V/ m . 

3=1 

Thus we can define the desired function f{x,t) as / = fx V fi V . . . V f m . ■ 

Comment: The representation Eq. ^ corresponds to choosing g(x) = (y\G\z), where a; is a concatenation 
of the strings y and z. 



9{x) = J2^jd 3 (x). 

i=i 

= d 1 (x)Ati, 
= d 2 (x) A(^h) At 2 , 
= d 3 [x) A(-.ii) A(-.t 3 ) At 3> 

= d m (x) A(-.ti) A...A(-.i m _i)At 
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4 Stoquastic LH-MIN is MA-hard 



In order to show that stoquastic LH-MIN is MA-hard we will view Arthur's BPP circuit as a quantum 
circuit. This quantum circuit will take as input: a quantum state |£) from Merlin, a set of |+) states (to 
simulate randomness) and some ancillas set to |0). The quantum circuit consists only of classical reversible 
gates and at the end Arthur measures a single qubit q out in the z-basis. He obtains 1 with high probability 
if the answer to his decision problem is yes; otherwise he obtains with high probability. If Merlin can only 
provide a classical state it is clear that the class of decision problems that can be solved this way is equal 
to MA. Before we argue that this new class of decision problems is equal to MA, let us give the proper 
definition. 

Definition 7 (MA q ) A promise problem L ycs , L no C S* belongs to the class MA q iff there exists a polyno- 
mial p and a classical reversible circuit V x that takes an input in (C 2 )®^'^') and is followed by a single qubit 
measurement, such that 

x G Z/y OS => 3 |0 P[^(|00...0),|+)®MO) = l] >2/3 

x G L no V|0 P[^(|00...0),|+) 8 M£)) = 1] <l/3. (5) 

Lemma 2 MA = MA g . 

Proof MA ? C MA: Let (L yes , L ao ) be a promise problem in MA 9 . If x G L ycs we have W(V x (\+)® r , |00 . . . 0), |£)) = 
1) > 2/3. Let Hi = |l)(l|<j out - We can write the success probability as 

P(l) = (£|M|0 > 2/3, (6) 

where M = (00 ... 0, +® r |V^ T niI4|00 ... 0, +® r ). We note that the observable M is diagonal in the standard 
basis, i.e. M — ^2 Z a z \z)(z\ where a z is a non-negative integer. This implies that A max (M) = max£(£|Af |£) 
is achieved for some bit string |£) = z max . Thus there exists a bit-string for which P(l) > 2/3 and this bit- 
string will be the input for the MA-verifier. If a: € L no , we have that V£ P(l) = (£|M|£) < 1/3, thus this 
also holds for the subset of all classical inputs from Merlin. 

MA C MA g : let a decision problem be in MA. If x G L yes , the classical witness can be used as input to the 
MA q -verifier and gives P(l) > 2/3. If x G L no , we need to argue that Merlin cannot cheat by giving Arthur 
a quantum state. Since the problem is in MA, we have that Vz P(l) = (z|M|z) < 1/3. Since M is diagonal 
in the z-basis, this implies that A max (M) < 1/3 and thus there is no quantum state with expectation value 
higher than 1/3 with respect to M. ■ 

Since Arthur's verifying circuit in MA g is a quantum circuit, one can apply Kitaev's circuit-to-Hamiltonian 
construction to MA g and prove that the ground-state energy problem for a 6-local stoquastic Hamiltonian 
is MAq=MA-hard. 

Lemma 3 6-local stoquastic LH-MIN is MA-hard. 

Proof Let V x be Arthur's verifying circuit that has an input of r qubits in the state |+) (labeled as coin- 
qubits), k ancilla qubits in the state 1 00 . . . 0) (labeled as anc-qubits) and a quantum state |£) with s qubits. 
Let V x have a total of T reversible classical gates, denoted as Rt ■ ■ ■ R^Ri- W.l.o.g. we can assume that 
each gate is a Toffoli gate, since these gates are universal for classical reversible computation. We follow the 
Hamiltonian construction in [5] (see also [53]). Let = H- m + H out + H prop + -f/ciock be a Hamiltonian 
acting on T clock-qubits labeled by t — 1 . . . T and n = r + k + s computational qubits. We have 

r fe 
Hin - ^h)(-|coin, l <»|0)(0| t=1 +^|l)(l| ancj ®|0)(0| t=1 , 
»=1 3=1 

H ont - |0)(0| 9out ®|l)(l| t=T , 

T 

ffciock = 5Z|01)(01| t _i, t . (7) 
t=l 
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Furthermore, H prop = Y,t=i H plop (t) with 

ffcvoiv(l) = |00)(00|i, 2 + |10)(10| M -Ri <g> (|10)<00|i, 2 + |00)<10|i, 2 ), 

Hevolv(t) = |100)<lQ0| t _l 1 t,t+l + |110)<110| t _i, t>t+ l 

® (|110)(100|t_i >t , t+1 + |100)(110| t _ M , t+ i), 1< t < T 
H cvolv (T) = |10)(10|T-i 1 T+|ll)<ll|r-i,T-flr®(|ll)(10| T -i,T + |10)<ll|r-i,T). (8) 

It was proved in [5] that if there exists a |£) such that V x outputs 1 with probability larger than or equal 
to 1 — e then X(H^) < e. If on the other hand for all |£) V x outputs 1 with probability smaller or equal 
to e, then X(H^) > c ^^ e - ) for some constant c. Thus the ground-state energy problem of this Hamiltonian 
is MA 9 -hard. We need only to verify that this Hamiltonian ij' 5 ' is of the stoquastic-type. The only terms 
that are off-diagonal in the computational basis can be found in H prop and H m . Inspection of these terms 
confirms that the Hamiltonian is stoquastic. M 

Remarks: One may wonder whether one can extend the class MA g to a class in which Arthur's verification 
circuit is more quantum, while the corresponding Hamiltonian is still stoquastic. One possibility is to allow 
for a measurement in the x-basis (instead of the z-basis) at the end, see [22] . 



5 Perturbation Theory Gadgets for Stoquastic Hamiltonians 

The goal of this section is to understand whether the complexity of stoquastic fc-local LH-MIN depends 
upon k — the number of qubits involved in the interactions. We will answer this question for Hamiltonians 
that are termwise-stoquastic, i.e., those having a decomposition H — J^s^Si where S runs over subsets 
of k qubits and Hs is a stoquastic Hamiltonian acting on the subset S. Direct inspection shows that all 
examples of stoquastic Hamiltonians encountered in the paper are also termwise-stoquastic and for 2-local 
Hamiltonians these notions coincide. 

Theorem 8 Let k be any constant. Any instance of k-local termwise stoquastic LH-MIN can be reduced in 
polynomial time to 2-local stoquastic LH-MIN. 

Throughout this section we will use the word stoquastic to refer to Hamiltonians that are termwise- 
stoquastic. Our main technical tool is the perturbation theory gadgets developed in [7] and extended in [8] . 
The proof can be organized in three parts. Firstly we reduce fe-local interactions to 3-local interactions using 
a variant of the subdivision gadget from [8]. This gadget only requires perturbation theory to second-order. 
The second step is to bring a stoquastic 3-local Hamiltonian into a special form 

H = H c \ sc — 2^ hjki Xj XkXi, (9) 

where -ff e ise is a 2-local stoquastic Hamiltonian, (j, fc, I) labels triples of qubits, and hjki are non-negative 
constants. We shall refer to Hamiltonians having a decomposition as in Eq. ([9]) as triple-X 3-local Hamilto- 
nians. In order to implement the second step a new three-qubit gadget will be constructed. The final step is 
to reduce 3-qubit interactions —hjki Xj X^ X\ to 2-local interactions. This can be done using the three-qubit 
gadget of [7j. Throughout this section we follow the notation of [7] and [5]. 

5.1 Reduction to 3-local interactions: the subdivision gadget 

Using the standard operator algebra basis of n qubits, any stoquastic fc-local Hamiltonian i/targct can be 
written as 

/W = Oi- £ X h%;;£> E£Eg.-- Eft +h.c. 

a 1 ,...,a k 

Here (ji, . . . ,jk) labels subsets of k qubits, a labels one-qubit matrices E° = |0)(0|, E 1 = |0)(1|, E 2 = |1)(0|, 
E 3 — |1)(1|, and are non-negative constants. The energy shift ft I is introduced in order to make 
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all diagonal matrix elements of -fftargct non-positive. Let us partition each subset ... ,jk) into two non- 
overlapping subsets of nearly equal size. Then we can rewrite -f/targct as 

M 

^target = A / - £(C Q ® D a + C\ ® £>*), M = 4' 
o=l 

where C a and Z) n are operators having the following properties: 

(1) All C a and D a have non-negative matrix elements, 

(2) C a and D Q act on non-overlapping subsets of at most [fc/2] qubits, 

(3) C\C a and D a D\ are diagonal. 
Since we regard k as a constant, the number of terms in the sum is polynomial, M = poly(n). 

Let us introduce M mediator qubits and consider a Hamiltonian H acting on n data qubits and M 
mediator qubits: 

M M 

H = H + V, H = A^J data (g)|l)<l| a , V = -VA^(C* a + ^)® ( 7+ + (Cl + ^ a )®a-+Q®/M, 

a— 1 a— 1 

where Q = T^=x{ C l C a + D a Dl), <t+ = |1>(0|, a~ = |0)(1|. As for A, it must be chosen such that \\V\\ < A. 
Note that all terms in H and V are stoquastic. Denote the Hilbert space of n data qubits as Hdata- Then 
H has zero-energy levels defining the eigen-subspace £_ = 7Ydata <£> |0® M ) separated from the rest of the 
spectrum by a gap A. Considering V as a perturbation, we compute the self-energy operator 

£_ = V— + K_+G+V+_ + V-+G+V++G+V+- + V-+G+V++G+V++G+V+- + ■■■ (10) 

up to second-order of the perturbation theory one getfl 

M 

E-(z) = -Y / (Cu®D* + C a ®Dl)+0(A- 1 / 2 ) for any z = 0(1). 

a=l 

Accordingly, the ground-state energy of H approximates the ground-state energy of -fftarget ~ with pre- 
cision 5 = 0(A~ 1 ^ 2 ). This reduces fe-local stoquastic LH-MIN to \k/2~\ + 1-local stoquastic LH-MIN. By 
repeating this reduction 0(log(fc)) time^|we end up with a 3-local stoquastic Hamiltonian. 

For obvious reasons the subdivision gadget cannot transform 3-local terms into 2-local terms. However, 
we can use it to reduce the variety of 3-local terms which have to be dealt with using different (and more 
complicated) methods. 

If one considers all possible 3-local terms proportional to —E^E^E^ 2 , there are essentially four different 
types of terms (up to permutations of qubits and bit flips <-> 1) shown in the first column of Table 1. By 
choosing the operators C a and D a from the second and the third column, one can reduce interactions of type 
(a) to type (b), type (b) to type (c), and finally type (c) to type (d). This requires at most three repetitions 
of the subdivision gadget. Now we can assume that a Hamiltonian has the form 

target - #clsc "EE K'kf ^ 8 ^ ® ^ ( U ) 
(j,k,l) a,P,°f=± 

where H c \ sc is a stoquastic 2-local Hamiltonian, (J, k, I) labels triples of qubits, and h"f'f > 0. 

5.2 Reduction from 3-local to special 3-local stoquastic Hamiltonians 

Our next goal is to construct a gadget reducing the stoquastic Hamiltonian of Eq. (| 1 1 1) to a special 3-local 
Hamiltonian, see Eq. ©. To simplify the discussion, let us first consider a Hamiltonian Eq. (fTTj) with a 

5 To avoid a proliferation of poly(n) bounds, we treat all terms proportional to ||C a ||, ||-Da||, or M as O(l). In general 
all these terms can be bounded by poly(ra)). Since we are free to choose A polynomially large, the bounds 0(A -1 / 2 ) and 
0(poly(n)A -1 / 2 ) are equally good. 

6 After each iteration we have to introduce an energy shift f2 /, since the terms C a C a + D a D' a may produce positive matrix 
elements on the diagonal. 
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3-local term 


choice of C a 


choice of D a 


(a) 


-|000) (000|^ 


|00)(00| ik 


\0)(0\i 


(b) 


-|000)<100] iW 


|00)(10] Jfc 


\0)(0\i 


(c) 


-|000)<110] iW 


|00)(1% 


\0)(0\i 


(d) 


-|000)(111| 







Table 1: Successive application of the subdivision gadget with the choice of C a and D a as above reduces any 
3-local term to a term of type (d). 

single 3-local term: 

^target = ^clso ~ 3(fl X <g> B 2 <g> B 3 + B{ <g> B\ <g> = (7+ Or Bj = CT - . 

where ff e ise is a 2-local stoquastic Hamiltonian, and the factor 3 is introduced for convenience. We shall 
need three mediator qubits which will be labeled by 1,2,3. Consider a Hamiltonian H acting on n data 
qubits and three mediator qubits: 

H = H + V, H = I data ®H M 
H M = ~A x {X 1 ®X 2 ®X i - 1)- ^A Z (Z 1 ®Z 2 + Z 2 ®Z 3 + Z 1 ®Z 3 -3I), 

3 

V = -oj^Bjt&af +Bt®aJ +H dse ®I M - (12) 

3=1 

The parameters uj, A x , A z must be chosen as 

w = <T 4 , A X = S- 5 , A z = S- e , 0<<S«1. (13) 

It will be shown later that 5 is the precision up to which the ground-state energy of H approximates the 
ground-state energy of H targo t (as before, we assume for simplicity that \ \Bj\ \ and ||if e ise|| are of order O(l)). 
Note that Eq. (TIB"]) implies ui <C <C A z . Also note that all local terms in H and V are stoquastic. 
The only 3-local term in H is the one proportional to — A1A2A3, so that H is a special 3-local stoquastic 
Hamiltonian. 

The Hamiltonian Hm is diagonal in the basis of states 

|v]/±) = -l|000)±-±=|lll), and \(f>f)=X j \V ± ), j = 1,2,3. (14) 

The spectrum of Hm is illustrated in Figure 1. By construction, Hm has a unique ground-state |^ + ) 
having zero energj0, while the first excited state \^~) has energy A x . The top part of the spectrum 
involves six nearly-degenerate (as long as A x <C A z ) states cffj 1 . Since ||V|| = 0(uj) <C A x , we can treat 
V as a perturbation and compute the self-energy operator on the zero-energy subspace of H , that is £_ = 

Hdata® |*+>. 

We can use the expansion of Eq. (P~CT|) . The perturbation V is designed such that V__ = ($f + \ V|\f r+ ) = 
H e \ se , see Eq. (fl"2j) . The contribution of the second-order term is proportional to the identity operator (see 
Appendix [U] for details of the calculation) : 

V-+G+V+- = -(3/4)co 2 [A; 1 + (A 2 + A,)" 1 ] I = ill. 

We can regard it as a shift of energy. Therefore 

E_(z) = CI I + H clsc + V-+G+V++G+V+- + [higher order terms]. (15) 

The key feature of the gadget is that the perturbation V cannot cause a direct transition from the ground- 
state if> + to the first excited state "J - (or vice versa). Any direct transition maps ^ + into the high-energy 

7 One should not confuse labels ± of the states and <f> with the labels ± referring to the low-energy and high-energy 
subspaces that appear in the perturbative series Eq. {Tojl. 
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^ % 

<b+ 0+ (b + 



Figure 1: Allowed transitions induced by perturbation V acting on the eigenstates of H are indicated by 
dashed lines. Direct transitions between \E' + and ^~ levels are impossible. 



± spanned by six states (f>f and having energy of order A z 3> A^, see Figure 1. Thus any 



band r _ , „ ^ rj 

third-order process follows the following scheme: 



+ 



Since the energy splitting A x of the (jr^ band is much smaller than its absolute energy A z , one can use 
an approximation in which the two intermediate Green's functions G + in Eq. (|15[) are proportional to the 
identity operator, G + (z) = [zl — H + )~ x w —I/A z for any z = 0(1). Within this approximation one has 



A? 



3w 

(*+|V 3 |f + ) « ff e lse-^2-(Sl(8 J B 2 ® J B3 + -B 1 t ®S|®B|), 



which approximates -fftarget since u 3 = A 2 Z . An accurate calculation of £_(z), performed in Appendix [Cl 
shows that the error in the approximation is of order 0(5). Contributions from transitions involving the 
level appear only in the fourth-order term in Eq. (|10p according to the following scenario: 



(16) 



see Figure 1. In Appendix [C] we show that the fourth-order term is of order 0(5). Therefore = 
QI + H tmg ct + 0(5) for any z = 0(1), and thus the ground-state energy of H taTge t is (5-close to the ground- 
state energy of H — ft I. 

One can applying this gadget in parallel to each term in the Hamiltonian Eq. (| 1 1 1) and obtain the desired 
reduction to a special 3-local stoquastic Hamiltonian. 

5.3 Reduction from special 3-local to 2-local Hamiltonians 

To simplify the discussion let us consider a special 3-local stoquastic Hamiltonian with a single 3-qubit 
interaction: 



target 



6£i ® B 2 <8> B 3 , 



where Bj are non-negative operators proportional to Xj and _ff c isc is a 2-local stoquastic Hamiltonian. The 
3-qubit interaction can be treated using the original three-qubit gadget in [7] . This original gadget coincides 
with the gadget defined in Eq. (fT2|) if one chooses A x — 0. In this case the zero-energy subspace of H is 
£- = Hdata <8> where £_ is spanned by the mediator qubit states 1 000) and | 111). Note that H is now 
a 2-local stoquastic Hamiltonian. 

We can choose A z = <5~ 3 and uj = <5~ 2 . The analysis performed in [7] implies that the ground-state energy 
of H = H + V, see Eq. (fl"2"|) . is 5-close to the ground-state energy of an effective Hamiltonian 



H, 



cir 



ni + h, 



else 1 



In 



6B 1 B 2 B 3 (g)X n 
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where I m and X m act on the two dimensional subspace of the mediator qubits spanned by |000) and |111) 
(regarded as logical |0) and |1) states). The energy shift is ft I = —8^ 1 (Bf + B\ + Since H c g is a 

stoquastic Hamiltonian, the Perron- Frobenius theorem implies that its ground-state \^Bq) can be chosen as 
a non-negative vector. Then a state 



is also a non-negative ground-state of H e ff- In addition, we have (J® X m )|^o) = \$f' ). Therefore H c s — fll 
has the same ground-state energy as -fftarget ■ This proves that the ground-state energies of H — fi I and 
-fftargot are (5-close. To deal with multiple 3-qubit terms in Eq. © one applies this three-qubit gadget in 
parallel to every individual 3-qubit term. 

Remark: In the original three-qubit gadget the operators Bj are required to be positive semi-definite in 
order to guarantee that the ground-state of H e g belongs to the sector where X m has eigenvalue +1. 



6 Stoquastic LH-MIN and Classical Post-Selected Computation 



The main goal of this section is to examine the complexity of stoquastic LH-MIN in the special case when 
the Hamiltonian possesses a polynomial spectral gap (i.e., the spectral gap scales as l/p(n), where n is 
the number of qubits and p is a fixed polynomial) . We shall prove that this problem can be placed in the 
complexity class PostBPP — a class of languages recognizable by a probabilistic polynomial time classical 
circuits with a post-selective readout of the answer. Speaking informally, any problem in the class PostBPP 
can be solved by a classical probabilistic circuit that outputs two random bits: a (the answer bit) and b (the 
success flag). The answer bit a contains the correct answer of the problem provided that b — 1 (if b — the 
value of a may be arbitrary). The success probability ¥[b — 1] must be positive for all input strings (however 
it may be exponentially small). Here is a more formal definition: 

Definition 9 (PostBPP) A promise problem L = L ycs U L no belongs to the class PostBPP iff there exist a 
polynomial p, predicates a(x,y) and b(x,y) from the class P defined for any y G jy>u x \) } such that 



The quantum version of this class, PostBQP, was defined in Ref. [57] and in that paper it was shown 
that PP=PostBQP. The following lemma provides a characterization of PostBPP in terms of the standard 
complexity classes. 

Lemma 4 MA C NP BPP C PostBPP = BPP path C BPP NP C Eg. 

Here BPP pat h is a class of problems solvable in polynomial time with a bounded error probability by a non- 
deterministic Turing machine that chooses its computational path randomly from the uniform distribution 
on a set of all possible paths, see [28]. The class BPP pat h is more powerful than BPP, since it offers the 
possibility to amplify the total probability of successful computational paths by adding 'idle' computational 
branches to a non-deterministic algorithm. In Appendix IBIwe give a proof of the equality PostBPP=BPP pat h- 
All other statements made in the previous lemma follow directly from [55] . 

Theorem 10 k-local stoquastic LH — MIN with the promise that the spectral gap A = l/poly(n) belongs to 



Proof Let H = J^s G Vt{k,p\,p2) be /c-local stoquastic Hamiltonian on n qubits, see Definitions [T] and 



8 By definition, a non-negative matrix is doubly-substochastic iff the sum of the elements in every row and every column is 
smaller or equal to 1, see [29] 



l*o) = l v I / o) + (/®A m )|* ) 



where y G 




PostBPP. 




(17) 
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The choice of q(n) in Eq. (fTT|) takes into account that H contains at most (£) local terms H$ and each local 
term H$ has at most 2 fc non-zero matrix elements in any row (column). This choice of q(n) also guarantees 
that all eigenvalues of G are between and 1, while the matrix elements G XiV = (x\G\y) obey the inequalities 

G x .y > and -<^G V <1 for all x,yeT, n . (18) 

zeS" 

Obviously, q(n) is a fixed polynomial. Let n(G) be the largest eigenvalue of G. The correct decision for 
LH-MIN with the Hamiltonian H can be made if we can evaluate /i(G) with polynomial precision: 

X(H)<0 /i(G)>p+ = i, 

X(H)>1/ P2 (n) /i(G) < M - = J f 1 - ' 



2 V l(n)P2(n) 

We shall present a polynomial-time probabilistic algorithm that evaluates /i(G) with a precision l/poly(n) 
using a post-selective readout of the answer. 

Define a matrix B which is diagonal in the standard basis such that 

B x = (x\B\x) = G ^v ( 19 ) 

We can transform G into a doubly-stochastic matrix F as follows: 

F = G<E)I+(I-B)<E)X=(^ I G B I ~ Q B 

The matrix F acts on n original qubits and one extra ancillary qubit. The states |0) and |1) of the ancillary 
qubit label the four blocks in the matrix representation of F given above. The purpose of the ancillary 
qubit is to enlarge the space of states of the random walk such that for every under-normalized row of G the 
walker can "leak" to one of the ancillary states (those in which the ancillary qubit is |1)) thus making the 
corresponding row of F normalized. Therefore F specifies a random walk on a space The fact that H 

is a /c-local Hamiltonian implies that F is a sparse matrix — it has at most (^)2 fc + 1 non-zero elements in 
each column (row). Moreover, for any fixed column (row) positions of the non-zero matrix elements and their 
values can be computed in poly(n) time. This means that the random walk defined by F can be efficiently 
simulated on a BPP machine, provided that the number of steps is at most poly(n). 

Our algorithm requires the simulation of w independent random walks (X^ ^ )t=o,...,L,i=i,...,w whose transi- 
tion probabilities are given by F. Here < t < L is the (discrete) time parameter, i is the index of the random 
walk and L, w will be specified later. Let us start each random walk X^f 1 from a point X^ — (xq , 0) 6 S n+1 , 
such that the ancillary bit (the last one) is set to 0, and the n bits constituting the original system are initial- 

(i) ...... (i) 

ized by a random string x € S" drawn from the uniform distribution with independent choices of Xq for 
different i. Suppose that after t steps the ith random walk arrives at a point X^ — (x[ l \ b^) (0 < t < L, 
1 < i < w). Let us postselect only those samples where the ancillary bits remain in the state for the whole 
duration of each of the w walks. In terms of the formal definition of PostBPP we have to define the success 
flag bit as b = -liyf^ V^L b[ 1 ^). The probability for the ancillary bit to stay in is 

^ = 1]=(^ E (-o\G L \ XL )) >^>0, 



where we have used the inequality Eq. (|18[) . 

Conditioned on b = 1, the random variables {x^)f =1 are independent samples from the probability 
distribution Pl{~) given by 

P , v) T, xe ^\G L \y) 

PLiy) -E x ^MGi\ y y yeJ: 



Consider a quantity 



Mest(G) 



Ew R v-i-u; / 



(x\G\x 



(i), 



w 



w 



(20) 



Given the samples x^ , the quantity /iest(G) can be efficiently computed since G is a sparse matrix. 
The expectation value of Mest(G) taken over the w independent samples of x^') is equal to 



E( M est(G)) 



E 



(x\G 



L + l 



\y) 



H x ^(AG L \v) ■ 

Since 1/4 < £?£ < 1 for all Azuma's inequality implies that 

W>0, F(\n est (G)-E( f i est (G))\>8\b=l)<2e-^. 
We now claim that for L chosen sufficiently large, 



(21) 



E(// cst (G)) 



yes" 



;|G%) 



is close to the largest eigenvalue /i(G) of G. More precisely, we will show that 

Lemma 5 Lei /zo > Mi 6e £/ie largest eigenvalue and second largest eigenvalue ofG. Suppose that log (/i(G))- 
log(/zi) > -pr. J/ one chooses L — 



5nr(n) 



then 



|/i -E(/i cst (G))| =0(2-"). 

This is the only step where the spectral gap assumption is used. Let us postpone the proof of the lemma 
until the end of the section. We choose L = 5ra ^(") (clearly, the spectral gaps of H and G are related by a 
polynomial factor, so that r(n) is a fixed polynomial). Then by Eq. (|21[) 

V<5>0, P(|/i e st(G)-/i(G)| ><5 + 0(2-")| 6 = 1) < 2e~^r . 

For some constant c > 0, taking w = 2n 2c ln(6) ensures that |/x es t(G) — ^(G)| = 0(n~ c ) with probability at 
least 2/3. Since the coefficients B y can be computed efficiently for any bit-string y and vary within a constant 
range we can evaluate Mest(G) (as in Eq. (|20[) 1 with a precision l/poly(n) using w = poly(n) random walks 
of length L = poly(n). The complexity of simulating the random walks is polynomial in L, w, and u; it 
follows that we can solve our decision problem in PostBPP. ■ 



Proof of Lemma [ 

Define an operator 



After simple algebra one gets 

E(^ est (G)) = Mo 



A € = 4(G*-^l*oX*o|) 
Mo 



1 



: E 



(x\A 



L+l 



\v)' 



i 



|A £ |y) 



E>l*o>" 



Let jtto > Ml ^ • • • j M2™-i be the eigenvalues of G. Note that G is chosen such that fj,j > 0. Therefore 

L 

i ii.t \ 
\Mo/ 

Let us choose L = Then IIArJI < 2" 5 ™/ 2 and therefore 



< 2 r 



E>1 

2™/ 2 



EJf) 
2™/ 2 



< 2 Tl ||A L || < 2- 3 "/ 2 . 
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Clearly, the same inequalities hold with L + 1 replacing L. On the other hand, e < 1 since 

X>i*o>> JeSw = i- 

ieS" y igS" 

It follows that |/Lto — E(/Lt es t(G))| < O(^ 2~ 3 "/ 2 ) = 0(2~") as /Uo < max x B x < 1 under our assumptions-^ 

Our result has a simple implication for adiabatic quantum computation using stoquastic Hamiltonians. It 
is known that the power of efficient adiabatic quantum computation with general 2-local Hamiltonians is equal 
to that of polynomial-time quantum circuits [30] . All Hamiltonians on the adiabatic path are required to 
have a polynomial gap in order for the adiabatic theorem to apply. Now let us restrict ourselves to stoquastic 
Hamiltonians with a polynomial gap. By the MA-hardness construction and analogous to the arguments 
in |30j . one can argue that any polynomial-time probabilistic computation can be simulated by an efficient 
adiabatic path using stoquastic Hamiltonians only. It is a more interesting but open question whether every 
efficient adiabatic path using stoquastic Hamiltonians can be simulated by a polynomial-time probabilistic 
machine. The proof of Theorem [TU] shows that post-selected classical computation allows one to efficiently 
sample from the ground-state distribution of a stoquastic Hamiltonian. Note that this may be potentially 
stronger than merely estimating the lowest-lying eigenvalue. In the proof we use the ability to sample from 
the ground-state to estimate the lowest-lying eigenvalue. A adiabatic path with stoquastic Hamiltonians, 
each of which has a l/poly(n) gap, can thus be simulated by post-selected classical computation and the 
decision problem that can be solved by these means is contained in PostBPP. 
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A The Approximate Counting Problem and Hash Functions 

For the sake of completeness we explain how to choose the parameters of the hash functions in the proof of 
Theorem [6l see the original paper [20] for more details. Define 

b= [log LARGE] +3. 

Without loss of generality b < k (otherwise Arthur has to verify that £1 contains a finite fraction of /c-bit 
strings, which can be done by the standard Monte-Carlo method without compression). Let hi, . . . , /ifc be kxb 
binary matrices chosen uniformly at random. Each matrix hj defines a linear hash function hj : S fc — > S b . 
Denote 

k 

h(n) = (J hj(n) c E b . 

We need the following technical lemma from [2D] (a proof is given at the end of this appendix) . 
Lemma 6 For any set fi C E fc and for any b < k such that |0| < 2 b ~ 2 one has 

1 

Neglecting the exponentially small error probability 2 _fc one gets 

|0|> LARGE =► |fc(fl)| > > [^j2\ 

|fi| < SMALL =^ \h(CL)\ < k ■ SMALL < k2~ n LARGE < f^+j j 2 h 



\h(Q)\ > H 
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For the second line we have used the trivial bound < fc|0| and Eq. ([J|. If n is sufficiently large, 

h(£l) contains a polynomially large fraction of fe-bit strings for positive instances and an exponentially small 
fraction for negative instances. Arthur can distinguish the two case by the Monte-Carlo method using 
Merlin's advice to verify membership in h(Q). This completes the proof of Theorem [B] I 
Proof of Lemma [6} 

Let us say that a function hj is invertible at the point x G f2 if hj{x) 7^ hj(y) for all y G fi\{a;}. Define a set 



Clearly, 
Thus 



Qj = {x G £1 : hj is invertible at a;}. 
\h(n)\ > \hj(Q)\ > for any j = 1, . 



|fc(fi)| > H 



> 



\Jn 3 = n 



(22) 



Since the probability of collisions for hj is 2 , we have 



¥[hj is not invertible at x] < 



H 

2 fc 



Therefore 



[J f2j ^ n 

3 = 1 



= P[3 a; € fi : Vj ftj is not invertible at x] < \Q\ 



(23) 



Combining Eqs. ([22]) and (|23|) and taking into account the conditions on b, k, and |Q| finishes the proof. ■ 

B PostBPP = BPP path 

The class BPP pat h is defined most conveniently in terms of non-deterministic Turing machines. Let M 
be a non-deterministic Turing machine (TM). We shall assume that at each step M chooses one of two 
computational paths. Given an input string x G £*, a polynomial-time non-deterministic TM makes at 
most q(\x\) steps before it stops, where q is a fixed polynomial. Whenever M stops, it outputs an answer 
bit a = 1 (accept), or a = (reject). 

Let path(M, x) and acc(M, x) C path(M, x) be a set of all computational paths and a set of accepting 
paths for a machine M running on input string x. By definition, |path(M, x)\ < 2 q (> x \\ One can visualize 
path(M, x) as a subtree of a binary branching tree of a height <?(|x|). Some paths make it all the way from 
the root to a leaf of the tree and some paths end before making ?(|a;|) steps. Let us introduce a branching 
variable y G £ 9 (N), such that a bit yj specifies what path M chooses at step j (if a computational path 
ends before making q(\x\) steps, the remaining bits of y can be ignored). For any x G E* and y G S«(I X D let 
l(x, y) be the number of steps that M does on input x before it stops and a(x, y) be the value of the answer 
bit. By definition, 1 < l(x,y) < q(\x\) for any x,y and 



|path(M,x) 



— V 

2?(|x|) 



2 l( - x > y \ |acc(M,a?)| 



1 



2«(l a: l) 



E 



(24) 



V ■ °-(x,y) = l 



Now we can define the class BPP pat h more formally. 



Definition 11 A promise problem L = L ycs U L no belongs to the class BPP pa th iff there exist a non- 
deterministic polynomial-time Turing machine M such that 



x G L 



yes 



X G Lri 



|acc(M,a;)| > - |path(M, x)\ 
|acc(M,a;)| < - |path(M,a;)| 
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Let us first prove BPP pat h C PostBPP. Indeed, consider a non-deterministic polynomial-time Turing 
machine M as above. Let C be a classical circuit (more strictly, a uniform family of circuits) that takes as 
input a pair (x, y) with y G E'CM), and simulates M for steps according to the computational path y. 

The circuit C outputs the answer bit a(x, y) and the number of steps l[x, y) in the path y. The idea is that 
we can simulate M by choosing y randomly from the uniform distribution and use post-selection to balance 
the resulting distribution on path(Af, x). Indeed, define a random success flag bit 6, such that we have a 
probability distribution of 6 conditioned on x and y 

P[b = l\x,y] 



2<?(l a 



-l(x,y) 



Since the circuit C outputs l(x,y), one can easily generate a bit with the desired distribution using a 
polynomial number of ancillary random bits. Making use of the formulas in Eq. (|24|) one can easily get 



"[a = 1 1 b = 1] = 



> = 1,6=1] _ 2- 2 «(N>£ y:a( ^ )=1 2^ 



P[6 = 1] 



2~2q(\x\) 



J2y 2 li - X ^ 



|acc(M, x)\ 
|path(M,at)| 



Comparing it with Dcf. [£l we conclude that a language recognized by M belongs to PostBPP. 

Now let us prove PostBPP C BPP pat h. Indeed, let L = L ycs U L no be a language from PostBPP. One 
can use the standard majority voting procedure to reduce the error probability from 1/3 to 1/4, i.e., we can 
assume that the predicates a(x,y) and b(x,y) from Def. [9] satisfy 

x e L =>• 



x e L 



yes 



X G L n 



(z,y) = l]>Q, 
P[a(x,y) = l|6(^y) = l]>3/4 ! 
F[a{x,y) = l\b(x,y) = !]<!/ A. 



Here y G YPW) is a uniformly random bitstring and p is a polynomial. The inequality P[6 = 1] > implies 
that there exists at least one y G 

£KW) SU ch that b(x,y) = 1. Therefore we can bound the probability of 
successful computation from below as 

P[& = 1] > 7TT\ ■ 

Construct a non-deterministic Turing machine M that takes x as input and does the following: 

(1) Perform p( \ x |) branchings to initialize a string y G E^M), 

(2) Compute predicates a — a(x, y) and b — b{x, y), 

(3) If b — 0, output a, 

(4) If 6 = 1, perform p(|x|) + 4 idle branchings and output a. 

Let us verify that M recognizes the language L in the sense of Def. [TTJ Indeed, one can easily check that 



|path(M,a)| = 2 p(N) [p[6 = 0] + 2 p(N)+4 P[& = 1] 



and 



|acc(M, a?) | = 2 P ^ [p[a = 1,6 = 0] + 2 p d a; l) +4 P[a = 1,6=1] 



Consider first the case x € L ycs . Then 



|acc(M,ic)| 



> 



[a =1,6=1] P[a= 1,6=1] 



2 

> -. 



|path(M, a:) | ~ 2^^)^ + F[b = 1] ~ P[6 = 1](1 + 2- 4 ) " 4(1 + 2- 4 ) 3 
Here we have used the fact that P[6 = 1] > 2~ p ^ x ^. Consider now the case x € L no . Then 



|acc(M, x)\ + F[a = 1, 6 = 1] ^ 1 



|path(M, x)| 
Thus M indeed recognizes L. ■ 



P[6 = 1] 



< 



2~ 4 < 
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C The three-qubit gadget 

In this appendix we will explicitly calculate the self-energy operator S-(z) for the perturbed Hamiltonian 
in Eq. (|12p up to third order in the perturbative series of Eq. (JTU]) . We shall also evaluate the norm of the 
fourth-order term. It follows directly from Eq. (JT2J) that 

K__ = (y + \V\y + ) = H else . 

A straightforward calculation yields 

y+-=-|£ £(B 3 - + ai?})®|^>, 

j=l a =±l 

where \<f>J) — crJ|5' Q ), see Eq. (fT4|) . Now we can compute the second-order term for the self-energy operator: 

=»(,) - V- + G + V + - = £ (g£±gWt±fg|) , (25 ) 

Here we denote A + = A z and A_ = A z + A x . Substituting z = 0(1) and taking into account that S| = 0, 
BjB\ + B^Bj = I, we come to 

EL 2) (z) = Q/ + 0(5 4 ), n = -(3/4)w 2 [A; 1 + (A 2 + A,)" 1 ] . (26) 

To compute the third-order term we need to know V++ . It is enough to find the matrix elements of V between 

the (ft^ states (since transitions between ^~ and <fr^ do not appear in the third order). A straightforward 
calculation yields 

(^\V\^) = H clsc S^ -|£ e ^ k > + ^4] > wh ere e(j, fc, I) = { J if (27) 

fe=i 

Therefore 

Z_(z)-V. + G + V ++ G + V + --{--) X. 2. (z-A^z-A^) +0(<5) - 

Taking into account Eq. (fT5]) one easily gets (for any z = 0(1)) 

= -i(B 1 (g>B 2 (g>B 3 + B\ ®Bl® B\) + O(S). (28) 
Although we have not calculated the fourth-order correction 

EL 4) = V-+G+V++G+V++G+V+- 



exactly, we have to get an upper bound on its norm. The fourth-order processes may involve the low-lying 
level VP - , see Eq. ([TBI , and potentially these processes can give a non-negligible contribution to £_ as E_ . 
Keeping in mind Eq. (fl6|) one can easily get (for any z = 0(1)) 

||E<_ 4) (z)ll = \\V. + G + V ++ G + V ++ G + V + .\\ = O ( Aa ^ A J - 0(<5- 16+12 + 5 ) = 0(<5). 

As for the higher-order corrections to E~ (from the fifth- order onwards) their contribution contains an 
additional factor w/A z , or uj/ A x which is at most 6. Therefore we arrive at 

E_(z) = fi 7 + iJ clsc - 3(B X ®B 2 ®B 3 + B\ ®b\® b\) + 0{6) 
for any z = 0(1). Here f2 is the energy shift given by Eq. ([2T5]) . 
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